1. Who we are
SlateArt is the controller of the personal data described in this Privacy Policy where we decide how and why your personal data is processed.
2. Personal data we collect
Depending on how you use our website and services, we may collect the following categories of personal data:
Information you provide directly
- Name, email address, phone number and postal address.
- Order details, including product choices, uploaded images, personalization details and delivery information.
- Smart Story content, including story text, photographs, captions, names, dates, places, voice recordings, audio, secret messages, unlock dates and the visibility settings you choose.
- Messages you send through contact forms, email, chat, or other communications.
- Account, Smart Link, QR, customer-login or affiliate information if you register for services available through our website.
Information collected automatically
- IP address, browser type, device information and approximate location derived from technical data.
- Pages visited, referring links, visit times and other website usage information.
- Cookie and similar technology data where used on the website.
Payment information
Payments may be processed through third-party providers. We generally do not store full payment card details on our own systems.
3. How we use your personal data
We use personal data to:
- Process and deliver orders.
- Provide customer support and respond to enquiries.
- Review uploaded files and personalization requests needed to create your order.
- Create, host, display and allow you to manage Smart Story, Voice Message, Secret Message and QR-linked pages.
- Manage affiliate, user or administrative functions where relevant.
- Improve website functionality, security and performance.
- Maintain business records, prevent misuse and protect our services.
- Comply with tax, accounting and legal obligations.
- Send service-related messages and, where permitted, marketing communications.
4. Legal bases for processing
Under GDPR, organisations must have a valid legal basis for processing personal data. Depending on the activity, SlateArt may rely on one or more of the following:
- Contract: where processing is necessary to take steps at your request or perform a contract, such as processing and delivering an order.
- Legal obligation: where we must keep records or comply with tax, accounting or regulatory requirements.
- Legitimate interests: where necessary for website security, service improvement, fraud prevention, internal administration and responding to non-order enquiries, provided your rights do not override those interests.
- Consent: where required, for example for certain cookies or optional marketing communications.
7. How long we keep your data
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, including to fulfil orders, respond to enquiries, maintain records, resolve disputes and comply with legal obligations.
- Order and accounting data may be retained for legal and tax recordkeeping periods.
- Customer service communications may be kept for a reasonable period to manage support and follow-up.
- Detailed pseudonymous Smart Story scan events are normally retained for up to 180 days. Anonymous daily, monthly and yearly aggregate totals may be retained for longer-term business reporting because they no longer contain the raw IP address or an individual visitor record.
- Smart Story content and the related account and Smart Link data may be retained for the Lifetime Access period while SlateArt.ie continues to provide the Smart Stories service, unless it is deleted or restricted earlier following a valid request, account closure, a legal requirement or enforcement of our Terms. Residual copies may remain temporarily in backups until they are overwritten in the ordinary backup cycle.
8. Data security
We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration or loss. However, no website or electronic storage system can be guaranteed to be completely secure.
9. Your data protection rights
Subject to applicable law, you may have the right to:
- Request access to your personal data.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data in certain circumstances.
- Request restriction of processing in certain circumstances.
- Object to processing based on legitimate interests.
- Request data portability where applicable.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with a supervisory authority.
To exercise your rights, please contact us using the details below. We may need to verify your identity before responding to your request.
10. Children’s privacy
Our website and services are not intended for children unless used with appropriate parental or guardian involvement. We do not knowingly collect personal data from children in a manner prohibited by applicable law.
11. International data transfers
Some service providers may process data outside your country. Where personal data is transferred internationally, we aim to ensure appropriate safeguards are in place as required by applicable data protection law.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or business practices. The updated version will be posted on this page with a revised effective date.
13. Contact us
If you have any questions about this Privacy Policy or how SlateArt handles personal data, please contact us: